Qcn9024 Firmware vulnerabilities

7 known vulnerabilities in Qcn9024 Firmware from Qualcomm. 7 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Snapdragon: Out-of-bounds Write

  CVE-2025-21468May 6, 2025Qualcomm

  Memory corruption while reading response from FW, when buffer size is changed by FW while driver is using this size to write null character at the end of buffer.

• 7.8 High severity

  Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Exploited

  CVE-2023-33106Dec 5, 2023Qualcomm

  Memory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Reachable Assertion

  CVE-2022-25702Dec 13, 2022Qualcomm

  Denial of service in modem due to reachable assertion while processing reconfiguration message in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Reachable Assertion

  CVE-2022-25692Dec 13, 2022Qualcomm

  Denial of service in Modem due to reachable assertion while processing the common config procedure in Snapdragon Auto, Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: Improper Authentication

  CVE-2022-25685Dec 13, 2022Qualcomm

  Denial of service in Modem module due to improper authorization while error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

• 7.5 High severity

  Snapdragon Compute, Snapdragon Connectivity…: Out-of-bounds Read

  CVE-2022-33236Nov 15, 2022Qualcomm

  Transient DOS due to buffer over-read in WLAN firmware while parsing cipher suite info attributes. in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

• 7.5 High severity

  Snapdragon Auto, Snapdragon Compute…: NULL Pointer Dereference

  CVE-2022-25741Nov 15, 2022Qualcomm

  Denial of service in WLAN due to potential null pointer dereference while accessing the memory location in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables